Database Operation Classification

2. The method of claim 1, further comprising the network device comparing historic ratios of the database operations to real time ratios to determine alterations of a system performance metric over a period of time based on the classification of real time data into the clusters, wherein the alterations are indicative of system performance degradation.

3. The method of claim 1, wherein classifying the plurality of clusters includes identifying a location of the clusters within a graphical representation of the ratio and time period for the event.

4. The method of claim 3, wherein each of the plurality of clusters cover a non-overlapping area of the graphical representation.

5. The method of claim 1, wherein generating the plurality of clusters includes utilizing a machine learning clustering mechanism to generate a model of a plurality of data points based on the ratio.

6. The method of claim 1, further comprising the network device determining when the classification of real time data has changed from a first cluster to a second cluster.

7. The method of claim 6, further comprising the network device generating a notification when the real time data has changed from the first cluster to the second cluster.

9. The network device of claim 8, wherein each of the plurality of database operation types corresponds to an operation performed by a computing device.

10. The network device of claim 9, wherein each of the plurality of database operation types correspond to the event during the time period.

11. The network device of claim 8, wherein the network device is a switching device.

12. The network device of claim 11, further comprising the network device to update a port table for the network device, a MAC address table, and a VLAN table based on the classification of the real time data.

13. The network device of claim 8, further comprising the network device to compare real time ratios with historic ratios for each of the plurality of operation types to determine the system degradation.

14. The network device of claim 8, further comprising the network device to: evaluate a system performance metric for each of the plurality of database operation types based on the classification of real time data into the clusters, and combine the system performance metric for each of the plurality of operation types to determine a network device performance metric.

16. The non-transitory computer-readable medium of claim 15, wherein the instructions are further executable to generate the clusters based on a ratio of the operations performed compared to a plurality of expected operations.

17. The non-transitory computer-readable medium of claim 15, wherein the plurality of attributes comprises at least one of: VLAN information, port information, and statistical properties associated with the switching device.

18. The non-transitory computer-readable medium of claim 15, wherein the one or more data tables associated with a switching device comprises at least one of: a MAC address table, a VLAN table, and a port table.

19. The non-transitory computer-readable medium of claim 18, wherein tracking the plurality of attributes associated with each one of a plurality of operations performed on one or more data tables associated with a switching device comprises determining at least one of the MAC address table, the VLAN table, and the port table is altered.

20. The non-transitory computer-readable medium of claim 15, wherein the system degradation is at least one of a deterioration of the switching device in performance capability, change in network topology, and failure of the network.